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(S) Control of a card interface for access to an apparatus such as a telephone. 

(§) An arrangement in an apparatus* particularly 
a telephone, the operation of which is on the 
basis of a memory card or a smart card Inserted 
into the apparatus, the apparatus including 
means for checking the identification data of 
the card and for activating the desired function 
of the apparatus after the acceptance of the 
data The apparatus includes a memory unit in 
which the checked and accepted identification 
data are recorded in connection with regis- 
tration into the system. The apparatus also 
includes a timer and comparison means which, 
on the basis of the output signal of the timer, 
compare the identification data of the card with 
the identification data recorded in the memory 
unit, and thus cause the operation to be termi- 
nated in the event that the compared identifi- 
cation data are not mutually identical. 
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CONTROL OF A CARD INTERFACE 



The invention relates to an arrangement in an 
apparatus, particularly a telephone, the use of which 
takes place on the basis of an authorization given by 
a memory card or a smart card inserted at a given time 
for this purpose into the apparatus, the apparatus 
including at leastmeansfbr checking the identification 
data of the card inserted into the apparatus and for 
activating the desired function after the acceptance of 
the data. The invention relates in particular to a radio 
telephone or the like which can be operated using a 
smart card or a memory card. 

When an apparatus, e.g. a telephone, is operated 
using a smart card or a memory card so that the fee 
is debited either directly from this card or via some 
other route from the holder of the card, on the basis 
of an authorization given by this card, it is very import- 
ant first to check the correctness of the card, i.e. its 
identification data, before the apparatus is set in oper- 
ation, for example before placing a call. For checking 
the identification data of a card perse, numerous dif- 
ferent methods have been suggested, for example in 
publication EP-333 918, in which the central unit 
transmits an identification signal and, if this signal 
agrees with the identification data of the card in the 
telephone, opens the line. The line will be open until 
the card is used in another location. Such an arrange- 
ment is highly unreliable, since caBs can be placed by 
anyone, without limitation, once the line has been 
opened. 

Publications EP-3G1740 and SE-456209 disclose 
systems in each of which the identification data of the 
card are checked every time an attempt is made to 
place a call. In EP-301740 this takes place so that, 
when a new apparatus is taken into use for the first 
time, it reads into its non-erasable memory the user 
identification code from a card, and will thereafter, 
whenever a call is placed or the apparatus is other- 
wise programmed, compare this identification code 
recorded in the memory to the identification data of 
the card, and if these do not agree, will not make a 
connection. In publication S&456209 the checking is 
arranged in connection with the telephone exchange, 
in which case the identification code has, in addition 
to a fixed part, also a variable part which is dependent 
on the number of connections made and will change 
in the same manner in the radio telephone concerned 
and in the telephone exchange, but it cannot be detec- 
ted by an outside monitor listening to the transmis- 
sions in the way fixed codes can, since he cannot by 
any means know the number of calls which have been 
placed by a given tome. In addition, the publication 
presents an additional code which is used only in 
exceptional cases and thus cannot be detected easily 
by an outside monitor. In this arrangement, also, a 
checking is always made when a call is placed. 



In the arrangements of publication EP-333 918 
and in other similar arrangements, of which type the 
systems currently used mainly are, a card can be rep- 

5 laced in a telephone by using a thin plastic strip having 
the shape of a card. After this trick, in the case of a 
memory card, the telephone remains registered in 
accordance with the data of the previous card, where- 
upon telephone calls can be made arbitrarily on the 

10 account of the previous card. In the case of a pro- 
cessor card and in cases applying telephone-specific 
checking of the identification data, as in EP-301 740 or 
SE-456209, misuse is not quite so easy but requires 
that a call is always placed using the correct card and 

15 the card can be replaced only after the call has been 
connected. However, even this alternative makes 
considerable misuse possible, since a card can, even 
for extensive misuse, be taken into use without 
authorization only for a moment, in which case the 

20 correct holder of the card will not necessarily notice it, 
or one and the same card can be used for activating 
a number of apparatuses simultaneously, and espe- 
cially if some function other than a telephone call is 
concerned, for example bank services or the like, mis- 

25 use for a very short time may make possible long-term 
damage which will be expensive. 

Voice identification and fingerprint checking have 
been suggested as one possibility for detecting mis- 
use, as in publication DE-3 438 106, but such systems 

30 are very expensive, and for the time being also unre- 
liable. Other methods for preventing the replacing of 
a card include placing the card in a mobile slide con- 
trolled by a switch; the card is placed in the slide and 
the entire slide with the card is pushed into the 

35 apparatus. Another corresponding structure is pre- 
sented in the publication NO-874965, in which the 
card is placed in a swivelling compartment or under a 
swivelling cover, which is controlled by a switch. In 
these models, misuse is not equally easy, since the 

40 card is very difficult to remove without making the 
switch which controls the slide, cover or the like move 
at the same time. Such an operation Is, however, 
possible by sawing an opening into the apparatus, via 
which opening the cards can be replaced. 

45 The main object of the invention is thus to provide 
an arrangement by which it can be ensured that the 
card by means of which the apparatus was originally 
activated has not been replaced by another card even 
during a call or any other operation. It is a preferred 

so object of the invention to provide an arrangement by 
means of which this checking can be earned out with 
a minimal consumption of current and, additionally, to 
provide an arrangement compatible with this, by 
means of which the use of a card will even otherwise 

55 take place with a minimal consumption of current, in 
order to maximize the period of use of a portable 
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apparatus before the replacement of batteries or the 
recharging of batteries. 

The present invention, is defined in the appended 
claims and gives rise to a crucial improvement with 
respect to the disadvantages described above. 5 

It can be deemed to be the most important advan- 
tage of the invention that by means of the arrange- 
ment it is possible completely to prevent any that type 
of misuse of a memory card or a smart card in which 
the card which has given the authorization could be 10 
removed from the apparatus whle its use is still being 
continued. Another advantage of the invention is that 
the consumption of current required by the card oper- 
ations can be minimized, thus making, for example, 
long-time use of a portable apparatus possible. is 

The invention is described below in greater detail. 

The invention relates to an apparatus (for 
example a telephone) which uses a smart card or a 
memory card. By the use of the invention it is possible 
to check gapiessly that the card by means of which the 20 
apparatus was activated has not been replaced by 
another card. In this context 'activation' means that 
the apparatus has been connected to some data com- 
munications network by giving to the network the iden- 
tification code contained in the card. For example, in 25 
radio telephone communication a telephone is regis- 
tered into a network (^system) by notifying the net- 
work of the telephone number and/or some other 
additional code contained in the card, which data are 
compared with the data recorded in the apparatus 30 
and/or in the telephone exchange, whereafter the 
apparatus, e.g. a telephone, will switch to the operat- 
ing mode as a result of this checking, making the 
selection of a number or the connecting of the selec- 
ted number possible. 35 

Smart cards and memory cards are small-sized 
modules, usually the size of a credit card, which con- 
tain recorded data. From a memory card the data can 
be only read - they cannot in any way be controlled 
interactively. A smart card contains the same identifi- 40 
cation data as a memory card, but the data on it have 
been protected so that only a person knowing a cer- 
tain numerical code can have access to the data on 
the card, i.e. can use the card. On both card types the 
data are recorded in a semi-conductor memory, or on 
memory cards alternatively on a magnetic strip. 
Likewise, from both cards it is possible to read the 
information by using contact surfaces on the surface 
of the card. The readable information is obtained as 
a series-form signal via one contact surface. Hereinaf- so 
ter, by the word 'card* is meant a smart card or a mem- 
ory card. The identification data on each of the cards 
usable in one and the same network are unambigu- 
ous. 

In order to fulfill the conditions for connection to 55 
a data communications network the apparatus must 
by some method ensure that another user, desiring 
advantage without compensation, will not, after regi- 



stering into the system, replace the card inserted into 
the apparatus in such a manner thatthe apparatus will 
not detect the replacing of the card. In such a case the 
apparatus would have registered into the network with 
a false identification code. 

According to the invention, the operation takes 
place according to the following process. The 
apparatus, in this case thus a telephone, includes an 
erasable memory unit or alternatively a non-erasable 
memory unit In the case of an erasable memory unit, 
each time the apparatus is taken into use with the help 
of a card (Tor example, a telephone call is placed), the 
identification code of the card is compared In a man- 
ner known per se with the data recorded in the 
apparatus itself or in the telephone exchange, and 
when the code has been accepted, this code and a 
possible separate other code of the card are recorded 
in this erasable memory unit In this connection the 
apparatus is also registered into the system, i.e. In this 
case into the data communications network. Accord- 
ing to the invention, after this the checking that the 
card is in place is carried out by repeating, at predeter- 
mined time intervals, the reading of the identification 
data of the card and their comparing with the identifi- 
cation data which were recorded in the said erasable 
memory unit at the time the apparatus was registered 
for the said cycle of use. If the data agree, the oper- 
ation of the apparatus will continue so that the user 
will not notice anything, but if these two sets of iden- 
tification data do not agree, the comparison unit which 
is for this purpose in the apparatus will disconnect the 
operation and connections of the apparatus. At the 
same time, of course, the debiting is discontinued, 
and thus,the longest possible time of misuse is the 
time interval between two successive checkings of 
the identification data. The identification data are 
erased from the memory unit either upon the termi- 
nation of the entire operation, i.e. the registration of 
the telephone or the like, or only when the card is 
taken out of the apparatus. 

When a non-erasable memory unit is used, the 
operation is in other respects the same as described 
above, but the identification data are read only once 
when the apparatus is taken into use, as in publication 
EP-301740, but with the exception that the identifi- 
cation data of the card in the apparatus are checked 
not only every-time the apparatus is registered into 
the network, i.e. for example when a telephone call is 
being placed, but also at predetermined time intervals 
during the telephone call or other operation, as des- 
cribed in the previous paragraph. 

The above-mentioned checking time interval is 
measured by a timer located in the apparatus, and the 
aim is to set as long a possible checking time interval 
so that the comparing will cause as little wear to the 
batteries as possible. Comparing at intervals of 
approximately one minute has in general been found 
suitable. Thus the apparatus can be fraudulently 
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registered into a network for a maximum of this time 
interval, i.e. for approximately one minute. This 
checking interval may be constant, in the mannerdes- 
cribed above, or it may be programmed to vary in a 
predetermined manner so that, after the registration of 
the apparatus, the comparing is carried out at shorter 
time intervals and, as time passes, the checking inter- 
val is lengthened by degrees. This can be done, since 
the longer the operation carried out with the original 
card continues, the smaller the use gained from the 
replacement of the card will in general be. It is also 
possible to use checking time intervals which vary at 
random, in order to increase the mean time interval 
and to make It more difficult to anticipate. 

In many cases, for example In the case of a car 
telephone, the user keeps his card in the telephone 
continuously when he is in the vicinity of the apparatus 
or keeps his apparatus with him. In this case, how- 
ever, there is not a call in progress continuously but 
the apparatus is in a mode of readiness or, even if 
there is a call in progress, the need for the card oper- 
ation is not continuous. However, during the mode of 
readiness and also during a telephone call, infor- 
mation is not needed from the card continuously and 
it need not be fed onto the card. In this case the con* 
sump^on of current by the apparatus can be reduced 
by disconnecting the supply voltage from the card 
when a certain predetermined time has elapsed from 
the last card operation, This time is preferably 
measured by the same timer that measures the said 
checking time interval. When the said predetermined 
disconnecting interval has elapsed from a card oper- 
ation, the card interface is deactivated and the supply 
voltage of the card is disconnected. At the time of the 
following card operation thereafter, the supply voltage 
is connected, the card interface is activated, and the 
card is primed to the mode which preceded the dis- 
connecting of the voltage. In connection with this initi- 
ation of the card interface, before the actual card 
operation, it is preferable always to carry out a com- 
parison of the identification data, regardless of 
whether the timer has given a signal for this or not 
Another possibility for initiating a card operation is to 
delay it until the timer gives a signal for the next com- 
parison of the identification data, and after this has 
been done, to carry out the card operation 
immediately. 

In the manner described above the remaining in 
place of the correct card can be thus ensured and the 
consumption of current by the card can be minimized. 
In terms of circuitry techniques, the arrangement 
according to the invention can be implemented in a 
plurality of ways. The invention is applicable not only 
to radio telephones and to ordinary telephones, but 
also to other apparatuses which are operated using 
memory cards or smart cards . 



Claims 

1. Apparatus, for example a telephone, the oper- 
ation of which takes place on the basis of an 

5 authorization given by identification data on a 
memory card insertable at for this purpose into 
the apparatus, the apparatus Including means for 
checking the identification data of the card intro- 
duced into the apparatus and for activating the 

10 desired function of theapparatus after the accept- 
ance of the data, characterized in that the 
apparatus further includes a memory unit in 
which, whenever the apparatus is operated using 
a card, the checked and accepted identification 

15 data of the card are recorded, a timer, and com- 
parison means which, on the basis of a signal 
given by the timer, carries out a comparison of the 
card identification data and the identification data 
recorded in the memory unit, and causes the 

20 function of the apparatus to be terminated in the 
event that the result of the comparison is that the 
compared identification data are not mutually 
identical. 

25 2. Apparatus according to Claim 1 , characterized in 
that the said memory unit is a non-erasable mem- 
ory, in which case the operation recording the 
identification data of a card is the actual initiation 
of the apparatus, whereafter the identification 

30 data will remain in the apparatus as a constant for 
comparison; or alternatively the said memory unit 
is an erasable memory, in which case the oper- 
ation which records the identification data of a 
card is any checked and accepted registration 

35 made using the card, the identification data recor- 
ded for the purpose of identification being erased 
from the memory unit at the end of the said regi- 
stration or at the time when the card is removed 
from the apparatus. 

40 

3. Apparatus according to Claim 1 or 2, character- 
ised in that the timer measures the checking time 
interval during each use for the time of accept- 
ance onward, and that the checking time interval 

45 is a constant predetermined time period or, alter- 
natively a time period varying between predeter- 
mined limits. 

4. Apparatus according to Claim 3, characterized in 
so that the comparison time interval provided by the 

timer is arranged to increase, preferably progres- 
sively, as the time which has elapsed from the lat- 
est card operation increases, which time Is also 
separately measured by the timer, or alternatively 
55 the comparison time interval provided by the 
timer is arranged to vary at random. 

5. Apparatus according to any of the preceding 
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claims, characterised in that the said comparison 
means always carries out the said comparison of 
the identification data, with the consequences, in 
connection with a card operation of the system, 
regardless of the signal given by the timer. 5 

6. Apparatus according to any of the preceding 
claims, characterised in that the said comparing 
means disconnects a supply voltage to the card 
whenever a predetermined time has elapsed from 10 
the last card operation, and immediately after 
each comparison of the identification data. 

7. Apparatus according to Claim 6, characterised in 
that, when a system or an operator feeds into the 15 
apparatus a function order or part of it in any man- 
ner, the card-control circuit in the apparatus is 
arranged to be activated immediately or, alterna- 
tively, to wait for the next comparison signal given 

by the timer and then to be activated and, as con- 20 
tinuation to the activation carried out at any given 
time, to prime the card into the mode which pre- 
ceded the disconnecting of the voltage, and to 
prime the said comparison means to carry out the 
comparison with the identification data and its 25 
consequences, before a card operation. 
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